Delete tokens that can not be used for logins.

This commit is contained in:
colcrunch 2023-12-11 18:13:24 -05:00
parent 23a3dd1ab9
commit bd8ef84862

View File

@ -172,6 +172,8 @@ def sso_login(request, token):
# Go to Step 2 # Go to Step 2
return redirect('registration_register') return redirect('registration_register')
messages.error(request, _('Unable to authenticate as the selected character.')) messages.error(request, _('Unable to authenticate as the selected character.'))
# Logging in with an alt is not allowed due to security concerns.
token.delete()
return redirect(settings.LOGIN_URL) return redirect(settings.LOGIN_URL)